Recently while doing some developing a proof of concept to exploit a weak authentication system on a wireless network I found the following major security vulnerability in Firefox.

Situation:

User is at a http page with a loggin form which has a https post back address (like facebook). In this case though the certificate on the postback address is invalid, (due to a man in the middle attack, or lazy network admins.) When the user click the loggin button firefox opens an https tunnel and sends the username and password across the wire using the bad certificate. It is only after this post is completed that firefox notifies the user the cert was invalid. This means that even though the https connection was using an invalid certificate the user never had the chance to cancel the send of the loggin data.

I have to give Wester Digital a lot of credit for how they responded when I told them my old 500GB external hard drive (which I am pretty sure was out of warrenty) died. Within 24hrs of me telling them its serial number and where I lived a new 750GB hard drive showed up in the mail.

While I may no longer exlusively buy Western Digital drives, I am open to giving them another chance, and just putting more money into redundency on my end so if a drive does fail I do not loose everything.

Bottom line, I've had some bad luck with Western Digital drive, and some great luck with Western Digital customer service.